General Information Notice on the Processing of Personal Data

Edition 1 / Revision 0

Issued on April 27, 2023

This document explains how PFA Raluca Schachter processes your personal data and ensures its protection in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

This notice applies to data processing activities carried out by PFA Raluca Schachter. It is relevant to you regardless of your position, whether as a client, partner (individual), representative of a partner (legal entity), requester of an offer, or someone who contacts us for other purposes (requests or complaints), a visitor to one of our offices or locations, a former/current/potential employee or intern, a visitor to our website, etc.

This notice covers the following aspects:

(a) Categories of personal data we process;
(b) The purposes for which we process such data;
(c) The legal grounds for our processing activities;
(d) The recipients to whom we disclose the data;
(e) The period for which we store the data;
(f) Consequences of refusing to provide us with your personal data;
(g) Your rights and how to exercise them;
(h) Our contact details;
(i) When this notice applies and its possible modifications.

Categories of Data, Purpose, and Legal Basis

1.1 Current or Potential Clients of PFA Raluca Schachter

We may process personal data about you for the following purposes:

(i) Providing Our Services
We will use your data to send you an offer (at your request), conclude and execute a contract with you, and ensure we provide the requested services. The legal basis for processing is the necessity for the conclusion and/or performance of the contract.
We will primarily process your identification data (name, surname, other details from your identity document) and, if we have a contractual relationship, the data included in your contract or issued invoices.

(ii) Handling Your Requests
We will use your data to respond to any inquiries, requests, complaints, or other communications you send us.
The legal basis for processing will be the execution of the contract or, where applicable, your consent.
We will mainly process your name, surname, contact details (email address, phone number), and information included in your request.

(iii) Marketing Communications
To send you communications and offers regarding our products, services, and promotions (on our initiative), we need to process your personal data. The legal basis for this processing is your consent.
We will primarily process your name, surname, email address, phone number, postal address, and purchase history.

1.2 Employees or Collaborators of Our Contractual Partners (Legal Entities)

We may process your data for:

(i) Maintaining the contractual relationship with your company
For us to collaborate with your company (including communicating to solve any issues that may arise in connection with the contract), we may need to process your personal data.
The legal basis for processing is our legitimate interest in ensuring contract execution.
We will mainly process your name, surname, job title, employer, phone number, and email address.

(ii) Marketing Communications
We may send you communications and offers about our products and services. The legal basis will be your consent or, in some cases, our legitimate interest.
We will mainly process your name, surname, phone number, email address, postal address, and consumption history.

1.3 Our Contractual Business Partners (Individuals)

We may process your data for the following purposes:

(i) Business Relations
Processing your personal data is necessary to initiate and maintain our business relationship.
The legal basis for processing is the necessity for contract conclusion/execution.
We will mainly process your name, surname, and identity document details.

(ii) Handling Your Requests
We will use your data to respond to any inquiries, requests, or complaints you send us.
The legal basis will be the execution of the contract or, where applicable, your consent.
We will mainly process your name, surname, contact details (email, phone number), and the content of your request.

(iii) Marketing Communications
We may send you marketing-related communications based on your consent or our legitimate interest.
We will mainly process your name, surname, phone number, email address, postal address, and contract history.

1.4 Public Authorities’ Representatives

We may process your personal data to fulfill our legal obligations, such as responding to requests from public authorities or maintaining legally required records.
For example, we may need to retain your name, surname, authority affiliation, and signature in legally mandated control registers.

1.5 Job or Internship Applicants at PFA Raluca Schachter

We may process your data to carry out the recruitment process.
We will process your name, surname, contact details (phone, email), professional experience, education, and other details from your CV.
The legal basis will be the execution of the employment contract or internship agreement.

1.6 Visitors to Our Offices, Locations, or Other Premises

We may process your personal data for security purposes.

  • If we have CCTV surveillance, we will process your images (video recordings) and, possibly, your voice.
  • At the reception, we may process your identification document details and visit purpose.
    The legal basis for processing is our legitimate interest in ensuring security.

1.7 Visitors to Our Websites or Social Media Pages

We may process your data for:

(i) Enhancing Your Website Experience
We use cookies and similar technologies to remember your preferences and improve website functionality.
The legal basis will be your consent or our legitimate interest.

(ii) Understanding Your Interactions
When you comment, like, share, or message us on social media, we may process your username, profile picture, and engagement actions.
The legal basis will be your consent.

(iii) IT Security and Communications Management
We may process IP addresses, device identifiers, and browsing history to ensure cybersecurity and prevent fraud.
The legal basis will be our legitimate interest or legal obligations.

Data Disclosure

As a rule, we do not disclose your data to third parties. However, in certain cases, we may need to share data with:

  • Service providers (e.g., IT, HR, legal, payment services).
  • Public authorities, if required by law.
  • Business partners, in legitimate business operations.

We ensure that all data recipients process your information securely and in compliance with privacy laws.

International Data Transfers

Currently, we do not transfer your data to non-EU/EEA countries or international organizations.
If such transfers become necessary, we will notify you in advance.

Data Retention Period

We store your data in line with our data retention policy, based on legal requirements and business needs.

Consequences of Not Providing Data

While you are not generally obligated to provide personal data, failure to do so may prevent us from offering services, responding to requests, or providing marketing communications.

Automated Decision-Making

We do not engage in automated decision-making that significantly impacts you.

Your Rights

You have the following rights regarding your personal data:

  1. Right of Access – Obtain details about your processed data.
  2. Right to Rectification – Correct any inaccurate data.
  3. Right to Erasure („Right to Be Forgotten”).
  4. Right to Restrict Processing – Limit how we process your data.
  5. Right to Object – Challenge data processing.
  6. Right to Data Portability – Transfer your data elsewhere.
  7. Right to Withdraw Consent – Revoke consent at any time.
  8. Right to File a Complaint – Submit a complaint to ANSPDCP (Romanian Data Protection Authority).

Contact Information

SCHACHTER RALUCA-IOANA PFA
CUI: 34329157
Email: raluca@metabolicenergy.ro
Address: Ilfov County, Ciofliceni, Romania

For updates, visit http://www.metabolicenergy.ro/.